DevOps
Kubernetes, Docker, Terraform, CI/CD pipelines, and cloud infrastructure.
80 articles
Shadow Mode for DevOps AI Agents: Earn Trust on Real Incidents Before Write Access
Run your DevOps AI agent in shadow mode: log proposed fixes, score agreement against what on-call actually did, and set promotion criteria for write access.
Kubernetes Cost Allocation Per Namespace: Showback That Teams Actually Trust
Kubernetes cost allocation per namespace, done right: OpenCost setup, idle and shared cost policy, label enforcement, and an automated showback report.
Secrets Management for DevOps AI Agents: Credentials Without Leaks
Secrets management for DevOps AI agents: short-lived Vault credentials, OIDC workload identity, scoped tokens, and keeping keys out of the context window.
GitOps for AI Agents: Make Your Agent Open Pull Requests, Not Run kubectl
Make your DevOps AI agent open GitOps pull requests instead of running kubectl: a PR tool schema, CI policy gates, CODEOWNERS approval, and Argo CD as executor.
Kubernetes Pod Stuck in Terminating: How to Debug and Fix It
A hands-on fix for a Kubernetes pod stuck in Terminating: find blocking finalizers, dead nodes, and hung preStop hooks, and learn when --force is safe.
Build an Alertmanager MCP Server: Let AI Agents Triage and Silence Alerts Safely
Build an Alertmanager MCP server so an AI agent can triage alerts and create bounded silences — TTL caps, matcher rules, and audit trails that hold in prod.
Build a CI Failure Triage Agent: Auto-Diagnose Failing GitHub Actions Runs
Build a CI failure triage agent for GitHub Actions: read failed job logs, classify flaky vs real failures, comment the diagnosis on the PR, retry safely.
OpenCost vs Kubecost: Which Kubernetes Cost Tool Should You Run?
OpenCost vs Kubecost compared hands-on: Helm installs, allocation APIs, PromQL cost metrics, free-tier limits, and which Kubernetes cost tool to run in 2026.
Argo Rollouts Progressive Delivery: Canary and Blue-Green on Kubernetes
Argo Rollouts progressive delivery guide: canary and blue-green on Kubernetes with AnalysisTemplates, Prometheus-gated promotion, and instant rollback.
AI Runbook Automation: Turn Markdown Runbooks into Safe Agent Tools
AI runbook automation the safe way: convert markdown runbooks into typed agent tools with guardrails, approval gates, and verification a model can't skip.
Graphify Review: I Ran This Knowledge-Graph Skill on a Real Repo
A hands-on Graphify review: 202 files graphed in 4.8s on 74MB RAM, zero token cost, what the AST extraction nails, and the one limitation that decided it for me.
Build a Loki MCP Server: Safe Log Search for AI Agents
Build a Loki MCP server for safe read-only log search by AI agents — LogQL guardrails, line caps, pattern collapsing, and prompt-injection defenses that hold.
What a DevOps AI Agent Costs to Run: Token Economics, Caching, and Model Routing
What a DevOps AI agent really costs: where tokens go in the loop, prompt caching math, model routing, tool-output limits, and cost per resolved incident.
Human-in-the-Loop Approval Gates for DevOps AI Agents: Let It Fix Prod, After You Say Yes
Build a human-in-the-loop approval gate so a DevOps AI agent can propose a prod fix, show the diff in Slack, and only execute after a signed human yes.
Build a Prometheus MCP Server: Safe Read-Only PromQL for AI Agents
Give an AI agent read-only PromQL access with an MCP server — query cost caps, step floors, result truncation, and hardening that keeps it out of your write path.
Karpenter vs Cluster Autoscaler: Which Cuts EKS Node Cost More?
Karpenter vs Cluster Autoscaler compared on node cost, speed, and spot handling. Real configs, bin-packing math, and when to pick each on EKS in 2026.
Prompt Injection in DevOps AI Agents: Defending Agents That Read Logs, PRs, and Alerts
DevOps AI agents ingest untrusted logs, PR bodies, and alert payloads — prime prompt injection targets. A practical guide to defending ops agents in production.
Build a Terraform Plan Review Agent: Catch Risky Changes in CI Before Merge
Wire an LLM agent into CI that reads your terraform plan JSON, flags destroys and IAM widening, comments on the PR, and blocks merge on high-risk changes.
Observability for DevOps AI Agents: Trace Tool Calls, Tokens, and Runaway Loops
Run an LLM ops agent blind and every 3 a.m. action is a mystery. Instrument agent observability with OpenTelemetry: trace tool calls, tokens, cost, and loops.
Build a FinOps AI Agent: Autonomous Kubernetes Cost Optimization with Guardrails
Wire an LLM agent to OpenCost and kubectl to find idle, over-provisioned workloads, then propose rightsizing as a GitOps PR — read-only, with human-gated writes.
The Agent Harness as Infrastructure: Least-Privilege, Guardrails, and Blast Radius
Before you loop an AI agent, engineer its harness like infrastructure: least-privilege permissions, guardrails-as-code, and blast-radius isolation for prod.
Evals for DevOps AI Agents: Test Your Ops Agent Before It Touches Prod
Before trusting an LLM ops agent in prod, build an eval harness: golden incident scenarios, tool-call scoring, safety gates, and a CI regression gate.
Build a Kubernetes MCP Server: Safe kubectl Access for AI Agents
Give an LLM agent real kubectl access without wrecking prod. Build a Kubernetes MCP server with an allowlist, dry-run, namespace scoping, and approval gates.
Loop Engineering for DevOps: From Prompting to Supervised Agent Loops
Stop prompting, start looping. Apply agent loop engineering to DevOps — PR babysitting, drift remediation, cost sweeps — with guardrails that keep prod safe.
Kyverno Policy-as-Code: Enforce Kubernetes Guardrails Without Rego
A hands-on Kyverno policy-as-code guide: install it, write validate/mutate/generate policies, run audit vs enforce, and test policies in CI before they block prod.
DORA Metrics: How to Measure Them with GitHub Actions and Prometheus
Instrument the four DORA metrics — deployment frequency, lead time, change failure rate, MTTR — with GitHub Actions, Prometheus, and Grafana. Real configs.
Multi-Agent LLM Analysis for DevOps: A Panel of Experts That Actually Improves Decisions
Build a multi-agent LLM panel for DevOps decisions like rollback and root-cause: orchestrator code, confidence-weighted synthesis, and when debate helps.
Kubernetes Pod Stuck in Pending (FailedScheduling): How to Fix It
A hands-on Pending pod playbook: read the FailedScheduling reason, fix insufficient CPU/memory, taints, node affinity, and unbound PVCs so the scheduler places it.
Kubernetes OOMKilled (Exit Code 137): How to Debug and Fix It
A hands-on OOMKilled playbook: confirm exit code 137, tell a too-low limit from a memory leak, right-size requests/limits, and stop pods getting evicted.
Kubernetes CrashLoopBackOff: How to Debug and Fix It (2026)
A step-by-step CrashLoopBackOff playbook: read crash logs, decode exit codes 1/137/127, and fix OOMKills, bad config, failing probes, and dependencies.
Kubernetes ImagePullBackOff: How to Debug and Fix It (2026)
A step-by-step ImagePullBackOff and ErrImagePull playbook: read the pull error, fix wrong tags, registry auth, Docker Hub rate limits, and node network issues.
Argo CD 3.5 Supply Chain Security: Enable Signed GitOps and Internal mTLS
A hands-on guide to Argo CD 3.5's Source Integrity and repo-server mTLS. Learn how to enforce signed GitOps commits, harden internal traffic, and compare with Flux.
FinOps Best Practices: Cloud Financial Management for Engineers
FinOps for cloud cost management: Kubernetes cost allocation with Kubecost and OpenCost, showback/chargeback, tagging, and commitment discounts.
Dagger CI/CD: The Future of Pipeline Development (Hands-On Tutorial)
Build CI/CD pipelines as code with Dagger. Containerized, cacheable, and portable pipelines that run the same locally and in CI. Complete guide with examples.
SLO, SLI, SLA Explained: A Practical Guide with Real Examples
Demystifying SLOs, SLIs, and SLAs with real-world examples. Learn how to set error budgets, choose the right indicators, and implement SLO-based alerting.
Platform Engineering Explained: Building an Internal Developer Platform
What is platform engineering and how to build an Internal Developer Platform. Golden paths, Backstage, DevEx metrics, and self-service infrastructure.
OpenTelemetry Distributed Tracing: From Zero to Production
Implement OpenTelemetry distributed tracing across microservices. Setup with OTLP collector, instrumentation for Node.js and Python, and export to Jaeger and Grafana Tempo.
AWS Cost Optimization: 15 Proven Ways to Cut Your Cloud Bill
Practical AWS cost optimization strategies for engineers. Rightsize EC2, leverage Spot instances, optimize S3 storage, use Savings Plans, and implement FinOps.
Ansible Automation: Complete Linux Server Management Tutorial
Automate Linux server configuration with Ansible. Playbooks, roles, variables, handlers, and real-world examples for web servers, databases, and monitoring.
ArgoCD GitOps: Best Practices for Production Deployments
Deploy applications with ArgoCD using GitOps patterns. Learn App of Apps, sync policies, health checks, secrets management, and progressive delivery.
Harness AI Agents for DevOps: What They Do and How to Use Them (2026)
A practitioner's look at Harness AI agents for DevOps: what they actually automate in CI/CD, real workflow examples, pros and cons, and how they compare to alternatives in 2026.
Harness Autonomous Worker Agents — AI-Driven CI/CD Pipelines Are Here in 2026
Harness launches autonomous worker agents that self-heal, self-scale, and self-optimize CI/CD pipelines. Breaking down the June 2026 announcement and what it means for DevOps teams.
Nginx Reverse Proxy: Performance Tuning and Advanced Configuration
Optimize Nginx as a reverse proxy with worker tuning, caching, compression, keepalive, and buffer settings. Production-ready configuration included.
5 Free Online Tools untuk DevOps Engineer (Timestamp, UUID, JWT, Hash, JSON)
Kenali 5 tools online gratis untuk DevOps engineer: timestamp converter, UUID generator, JWT decoder, hash generator, dan JSON/YAML validator. Praktis, client-side, tanpa login.
Docker Multi-Stage Build: Panduan Lengkap untuk Pemula (2026)
Belajar Docker multi-stage build dari nol — perkecil image 10x, hapus dependencies build, dan deploy container ringan ke production.
Epoch Converter: Cara Konversi Timestamp ke Tanggal (dan Sebaliknya)
Panduan lengkap cara konversi epoch timestamp Unix ke tanggal biasa dan sebaliknya menggunakan tool gratis epoch converter di devtocash.com.
Hash Generator Online: Generate MD5, SHA-1, SHA-256, SHA-512 dengan Cepat
Tool hash generator online gratis untuk generate MD5, SHA-1, SHA-256, dan SHA-512. Verifikasi integritas file, bandingkan checksum, dan generate hash untuk keamanan data.
JSON Formatter Online: Rapikan & Validasi JSON dalam Sekejap
Tool JSON formatter gratis untuk merapikan, memformat, dan memvalidasi JSON. Cocok untuk developer, DevOps, dan SRE yang bekerja dengan API dan config file.
JWT Decoder: Cara Decode & Inspeksi JSON Web Token Secara Online
Tool JWT decoder online gratis untuk decode, inspeksi, dan debugging JSON Web Token. Lihat header, payload, dan signature JWT tanpa perlu command line.
UUID Generator: Generate UUID v4 & v7 Gratis untuk Development
Tool UUID generator online gratis untuk membuat UUID v4 (random) dan UUID v7 (timestamp-based). Cocok untuk developer yang butuh unique identifier untuk database, API, dan testing.
Kubernetes RBAC Deep Dive
Kubernetes RBAC deep dive: ClusterRole vs Role, audit logging, service account hardening, and defense against privilege escalation — real YAML examples.
SelfMem: One Memory Layer Across Every AI Assistant — Free & Open MCP Tool
SelfMem gives every AI assistant one memory layer — hybrid search, MCP-native, self-hostable. Review for DevOps & SRE engineer teams using AI agents.
Kubernetes Pod Autoscaling: HPA, VPA, and KEDA Explained
Master Kubernetes pod autoscaling with HPA, VPA, and KEDA. Real YAML configs and decision framework included.
ArgoCD GitOps: Best Practices for Production Deployments in 2026
Production-proven ArgoCD patterns — App of Apps, multi-cluster management, secret handling with External Secrets Operator, health checks, and progressive delivery for GitOps at scale.
Dagger CI/CD: Complete Guide for DevOps Engineers in 2026
Learn Dagger — the programmable CI/CD engine that runs pipelines in containers. Dagger Functions, multi-language SDK, caching, and GitHub Actions integration for portable CI/CD.
Kubernetes LLM Inference: Deploy and Scale Open-Source LLMs in 2026
Learn how to deploy and scale open-source LLMs like Llama 4, Mistral, and DeepSeek on Kubernetes with vLLM, GPU sharing, autoscaling, and cost optimization strategies for 2026.
Terraform Best Practices for Production Infrastructure (2026 Edition)
Production-ready Terraform patterns: state management, module structure, workspaces, drift detection, and CI/CD integration. Hard-won lessons from managing infrastructure at scale.
Docker Compose for Development Environments: Best Practices 2026
Master Docker Compose for local development with hot reload, multi-service orchestration, debugging setup, and production parity. Complete guide for 2026.
Platform Engineering 2.0 in 2026: How Internal Developer Platforms Are Eating DevOps
Platform Engineering is the fastest-growing DevOps trend of 2026. Learn how IDPs like Backstage, Port, and Cortex reduce cognitive load, the Platform as Product mindset, and how to build a platform that developers actually use.
Production Monitoring with Prometheus + Grafana: Complete Setup Guide (2026)
Set up production-grade monitoring with Prometheus and Grafana. Step-by-step guide covering Node Exporter, AlertManager, dashboards, and alerting rules for your infrastructure.
Kubernetes Security Best Practices 2026
Kubernetes security guide 2026: RBAC, Pod Security Standards, network policies, image scanning, secrets management, and runtime defense — code examples.
CI/CD Pipeline with GitHub Actions for Next.js on VPS
Build a complete CI/CD pipeline with GitHub Actions to automatically deploy your Next.js application to a VPS. Step-by-step tutorial with real code.
GitHub Actions CI/CD: Deploy Next.js to VPS (2026)
Step-by-step tutorial to automate Next.js deployments to a VPS using GitHub Actions CI/CD pipeline with zero-downtime rollouts.
Docker Multi-Stage Builds: Slash Your Image Size by 90%
Master Docker multi-stage builds to shrink image sizes from 1GB to under 100MB. Real examples for Go, Node.js, and Python with production best practices.
Error Budgets: Stop Wasting Your SRE Team's Time
Learn error budget calculation, implementation, and policies for SRE teams. Practical guide with Prometheus burn rate alerts and real examples.
CI/CD Pipeline With GitHub Actions: The Complete Production Setup
Build a production-grade CI/CD pipeline with GitHub Actions from scratch. Includes Docker builds, security scanning, staging/prod deployments, and rollback strategies.
10 Kubernetes Mistakes That Cost Companies Millions (And How to Fix Them)
Real Kubernetes misconfigurations I've seen destroy uptime and budgets at scale. Avoid these 10 mistakes and save your team thousands per month.
PostgreSQL Performance Tuning: Fix Slow Queries in Production Without Downtime
The exact commands to diagnose and fix slow PostgreSQL queries. Real examples from production databases handling millions of rows — no downtime required.
AWS Lambda vs Containers: Real Cost Comparison Nobody Shows You
Actual dollar numbers: when Lambda is cheaper, when containers win, and the hidden costs that flip the math. Includes calculator examples at 3 traffic levels.
CI/CD Pipeline With GitHub Actions: From Zero to Production in 30 Minutes
A production-ready GitHub Actions CI/CD pipeline that builds, tests, and deploys Docker apps automatically. Real YAML, real patterns, zero fluff.
Linux Performance Tuning: 10 Commands Every DevOps Engineer Must Know
The exact Linux commands I use daily to diagnose slow servers, identify bottlenecks, and tune performance in production — with real examples and what the output actually means.
Nginx Performance Tuning: How I Handle 100K Requests/Second on a $40/mo Server
The exact Nginx configuration tweaks that took my servers from 8K to 100K req/s without upgrading hardware. Real configs, real benchmarks.
Redis Caching Patterns That Slash AWS Costs: A Production SRE Guide
The 6 Redis caching patterns I use to cut AWS RDS costs by 40-60% in high-traffic systems — with real configs, Python examples, and when to use each one.
Zero-Downtime Deployments with GitHub Actions and Kubernetes
The exact GitHub Actions workflow I use for zero-downtime blue/green deployments to Kubernetes — with rollback in under 60 seconds.
Production Kubernetes Monitoring: Prometheus + Grafana Setup That Actually Works
The exact Prometheus and Grafana configuration I use to monitor Kubernetes clusters handling millions of requests per day — with the alert rules that catch issues before users notice.
5 Terraform Patterns That Cut My AWS Bill by 40%
Real infrastructure-as-code patterns I use in production that reduced monthly AWS costs by $8,000 without sacrificing reliability or performance.
Docker Compose vs Kubernetes: When to Use What (2026 Guide)
A practical breakdown of Docker Compose vs Kubernetes — when to use each, real cost differences, and the decision framework I use for production deployments.
How I Audit and Fix SEO Issues on a Next.js Blog (Real Checklist From a Live Site)
A practical walkthrough of auditing SEO on a Next.js 14 blog — fixing dependency CVEs, configuring Vercel env vars, custom domain DNS, and a full on-page SEO review checklist.
AI-Powered DevOps: The 5 Ways Engineers Are Turning AI Skills Into $5K–$20K/Month in 2026
Platform engineering and AI are reshaping DevOps in 2026. Here's exactly how senior engineers are monetizing these skills through freelancing, consulting, and digital products.
Kubernetes Cost Optimization: How I Cut Cloud Bills by 60% Without Sacrificing Uptime
Practical techniques I've used across dozens of production clusters to slash Kubernetes costs — from right-sizing nodes to Spot instances and namespace-level budgets.